2dd3f260235583b4553e78e939837e73_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2dd3f260235583b4553e78e939837e73_JaffaCakes118
Size

184KB
MD5

2dd3f260235583b4553e78e939837e73
SHA1

a3995d90881334f248594e0fde723fc05489cc93
SHA256

0db3f5c0950e26fa2475f5756a9994393d050861601360f4adc271168dde65e8
SHA512

83c3330f0013efb1b7e4164ae9b7ea5edc7e2b5b772b24d5a8502c23f296f8f47074bb3e4b6209b504b9752de12c7c079e07eab7536d64c1eb33bbe04dc038b9
SSDEEP

3072:4VdvT204QaPbA3jwRYvXrpyCEVuOR9IqPArYTCl7Iw7I:4aQaD2vXdyCYGqPA0gIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd3f260235583b4553e78e939837e73_JaffaCakes118

Files

2dd3f260235583b4553e78e939837e73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21073cbf762cd52013b0481a53f1187d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessVersion
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
SetErrorMode
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GetFullPathNameA
FileTimeToLocalFileTime
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
ExitProcess
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
RaiseException
HeapReAlloc
TlsGetValue
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetLastError
GlobalFlags
MulDiv
lstrcpynA
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleHandleA
GetVersionExA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetTempPathA
SystemTimeToFileTime
lstrlenA
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetExitCodeProcess
TerminateProcess
Process32Next
FileTimeToSystemTime
WriteProfileStringA
GetProfileIntA
GetProfileStringA
LoadLibraryA
GetProcAddress
FreeLibrary
WaitForSingleObject
FindFirstFileA
FindNextFileA
FindClose
GetSystemDirectoryA
GetFileAttributesA
CreateDirectoryA
GetVersion
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateFileA
WriteFile
CopyFileA
SetFileAttributesA
GetLocalTime
TerminateThread
CloseHandle
GetWindowsDirectoryA
Sleep
GetUserDefaultLangID
GetLastError
LocalFree
DeleteFileA
HeapSize
MoveFileA

user32

SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetClassNameA
PtInRect
ClientToScreen
ReleaseDC
GetDC
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
DestroyMenu
LoadStringA
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetDlgItem
IsWindowEnabled
SendMessageA
GetSystemMetrics
GetWindowLongA
SetWindowLongA
SetTimer
LoadCursorA
MessageBoxA
wsprintfA
EnableWindow
GetDlgCtrlID
UnregisterClassA

gdi32

ScaleWindowExtEx
SelectObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetWindowExtEx
DeleteObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
SHFileOperationA
ShellExecuteExA
ShellExecuteA

comctl32

ord17

ole32

CoCreateGuid

wininet

InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21073cbf762cd52013b0481a53f1187d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

wininet

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 12KB - Virtual size: 9KB